Package: bluez-tools Version: 2.0~20170911.0.7cb788c-4 Severity: normal Tags: patch upstream
Hi, There is a NULL pointer dereference in bt-device.c. Since upstream is not very active, please apply this patch downstream. It should be apparent that the only case in which behavior will differ is in the case that NULL would be dereferenced. --- src/bt-device.c.2 2022-11-12 11:59:49.948223308 -0500 +++ src/bt-device.c 2022-11-12 11:57:55.264211619 -0500 @@ -622,7 +622,7 @@ g_print(" Connected: %d\n", device_get_connected(device, &error)); g_print(" UUIDs: ["); const gchar **uuids = device_get_uuids(device, &error); - for (int j = 0; uuids[j] != NULL; j++) + for (int j = 0; uuids && uuids[j] != NULL; j++) { if (j > 0) g_print(", "); g_print("%s", uuid2name(uuids[j])); I hope we can get this in Bookworm. Thanks! -- System Information: Debian Release: bookworm/sid APT prefers testing-debug APT policy: (500, 'testing-debug'), (500, 'testing'), (2, 'unstable-debug'), (2, 'unstable'), (1, 'experimental') Architecture: amd64 (x86_64) Foreign Architectures: i386, arm64 Kernel: Linux 5.19.0-2-amd64 (SMP w/2 CPU threads; PREEMPT) Kernel taint flags: TAINT_USER, TAINT_WARN, TAINT_FIRMWARE_WORKAROUND Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE not set Shell: /bin/sh linked to /usr/bin/dash Init: systemd (via /run/systemd/system) LSM: AppArmor: enabled Versions of packages bluez-tools depends on: ii libc6 2.36-4 ii libglib2.0-0 2.74.1-1 ii libreadline8 8.2-1.1 Versions of packages bluez-tools recommends: ii bluez-obexd 5.65-1+b1 bluez-tools suggests no packages. -- no debconf information
signature.asc
Description: This is a digitally signed message part